Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
File: 7_vi0INCz7z3p9dOiOvQMeEgItk.mft (raw, json)
Hash identifier: YtUBYLr0o+Siglb0yLroduZkfN2KE2pT+73xROgOkcw=
Subject key identifier: ED:C0:F0:C0:8F:E4:52:21:F6:B3:B7:A3:5C:7D:22:9E:41:2E:DD:EF
Authority key identifier: EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
Certificate issuer: /CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Certificate serial: 019A725C7234800399C3F439AB56E763B158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
Manifest number: 0514
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: 7_vi0INCz7z3p9dOiOvQMeEgItk.crl (hash: 73s6MzLkTTy7VheCHNAsyeqmV8a/c8pxeLfSRTqnVaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:72:34:80:03:99:c3:f4:39:ab:56:e7:63:b1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effbe2d08342cfbcf7a7d74e88ebd031e12022d9
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=edc0f0c08fe45221f6b3b7a35c7d229e412eddef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1f:8a:84:72:74:3e:a3:20:92:94:01:8a:1c:
10:bc:dd:17:fb:b5:d6:22:f9:61:75:b7:82:db:62:
f9:3f:8a:84:4b:2d:21:3e:95:68:5b:7b:77:1a:48:
bc:44:a4:97:4a:de:ed:eb:bb:6e:90:a1:3b:c8:a2:
c9:96:4d:cf:25:e6:55:70:fc:33:e6:bb:7a:ef:d1:
dc:ad:65:51:93:6a:f1:ff:25:4d:f7:4d:e3:1e:f0:
99:6c:52:77:23:8d:68:6b:5b:ff:c6:92:b6:48:7e:
14:5f:15:3b:6d:a6:b9:fc:88:5e:17:34:62:bb:ca:
ed:f9:59:f1:9f:cd:d9:6f:b0:24:f1:20:e4:8a:88:
58:75:bb:23:06:8e:06:52:2a:93:e0:a1:b0:a4:1c:
2e:86:91:09:b4:14:0b:9c:46:77:fc:57:3b:a5:89:
65:02:35:34:b3:32:2b:7e:3d:23:a3:cb:a8:ad:73:
b3:9c:1f:c1:22:98:53:d7:93:a6:1d:6d:ac:a5:a6:
1d:24:5a:17:81:23:2a:c0:e6:14:c6:29:d0:e6:9e:
c9:c0:8b:49:a5:63:15:64:42:5f:e8:fd:c6:69:06:
06:15:de:80:7c:8a:de:50:4c:f8:da:4f:39:94:a5:
a8:2e:ec:f6:bb:e8:1c:a1:79:8f:15:42:f6:39:73:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C0:F0:C0:8F:E4:52:21:F6:B3:B7:A3:5C:7D:22:9E:41:2E:DD:EF
X509v3 Authority Key Identifier:
keyid:EF:FB:E2:D0:83:42:CF:BC:F7:A7:D7:4E:88:EB:D0:31:E1:20:22:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_vi0INCz7z3p9dOiOvQMeEgItk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6ae8b3-a390-4b51-b7f1-f2f1ca287141/1/7_vi0INCz7z3p9dOiOvQMeEgItk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:08:71:a8:23:91:09:91:4c:ff:06:ac:2c:48:1a:dd:23:b7:
11:dd:43:15:c3:94:28:3d:c3:39:a6:d9:1c:3d:fd:bd:f5:59:
0b:4f:db:b5:5f:c9:b8:32:f4:10:43:ae:7c:73:c9:2d:40:43:
64:2c:b7:e7:74:57:66:7a:c6:4e:48:ab:4e:62:89:55:63:8d:
34:05:f6:6f:8f:ed:c5:db:b6:8e:50:25:b4:b8:33:d2:ab:e6:
27:6a:c1:9c:6a:e4:c8:f4:83:09:a1:31:2f:f8:f1:34:cc:d8:
81:17:76:1c:17:7b:34:22:93:19:02:f6:aa:64:01:5b:b7:49:
d1:6e:f5:2a:31:ab:7f:58:0d:94:27:4b:b1:40:a8:ab:4a:8c:
8f:cb:89:d4:1c:e0:23:84:60:62:ff:e0:c0:ef:45:e6:d2:cc:
37:73:c5:cf:8d:90:89:62:dc:b9:50:b8:68:92:67:71:ae:44:
82:34:1b:8d:8f:f5:f3:b7:e2:8d:46:a5:12:fd:08:af:5d:d5:
c6:5d:ed:df:41:86:48:9e:e8:8c:ae:9b:7b:92:9b:bf:a4:b1:
67:e5:d6:0a:e4:69:77:c0:b8:8c:4a:76:fb:ce:a8:0b:91:24:
53:02:4b:3b:aa:75:81:c3:33:5d:39:ff:f8:73:34:79:9a:c0:
0d:9e:31:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:37 2025 by rpki-client